jwt 5
- Roles changed, but the old ones kept working for 30 minutes: putting a permission version in the JWT
- Why I rolled back refresh token rotation after one day
- Login returns 200 but the cookie disappears: NextResponse.cookies is keyed by name only
- With an API Gateway in place, move token authentication into it
- Adding a Lua custom plugin to Kong via a Docker image